$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft File: 2-arjgxG6EG0TSucawO7ZfViHbE.mft (raw, json) Hash identifier: x06yekzHXLEnCLUGgrOzuaTOSCzbvwhSI9YsTUNzUk8= Subject key identifier: ED:73:4B:92:4A:BF:F8:0B:D1:F3:80:B5:43:35:96:18:60:F4:15:3C Authority key identifier: DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1 Certificate issuer: /CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1 Certificate serial: 0197B5C5218ED87E1DF9CDB42A1CB0A291CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft Manifest number: 15D3 Signing time: Sat 28 Jun 2025 09:01:24 +0000 Manifest this update: Sat 28 Jun 2025 09:01:24 +0000 Manifest next update: Sun 29 Jun 2025 09:01:24 +0000 Files and hashes: 1: 1F-PLkJeZsd5BhbWomZg7cLPFrk.roa (hash: yrygGJcoXqVH2Jg8Juj5GnPuSpfNJREHSoSijlooIac=) 2: 2-arjgxG6EG0TSucawO7ZfViHbE.crl (hash: C04ElvoNlQhuWYB6f/3X6bogNRdFIB3/wJrb6f9UJqo=) 3: 28-uwfDVLpaahAp5_g4gOqonJRE.roa (hash: ZiFvqyNcFNQjj1MRiXrgYLhWSDf2EOuub9eyPgFwZ5w=) 4: 3PFyhkeygxSnr9lo2JsKv8zzptA.roa (hash: q1R0erCPFvF5C0+eg74kijSUxdckHy4082+SsXMgLoI=) 5: 5gCvrLecynoNlZqqecgbQQFoRrQ.roa (hash: 9K+m38Q0PxPs98dlo8mOUJqX2gTHhK0yh4taoKPklF4=) 6: Hgi1HuyOIm-pDNTXBi7SDeMMv54.roa (hash: 4I6w4WrI+TeCpJfBFE/CPemODRHx6exn+BxP4Gc/fZ4=) 7: VTFmKW5oJe_aki7x1urblkP0Fyc.roa (hash: 2MZuFdP6pQLocFIUqAzsdUT8olNA1CbFEwyUxslWUHU=) 8: WuMjl-VoG-q9mOfKlozyoU3i5Zc.roa (hash: gMQYLpr2E7Od3N3zIX37zoUdKHUCId0XHkWxbn/9Hs4=) 9: Y-ggvECpJ-TUj9BMaNxFVHCG_mk.roa (hash: yHJbvycQTABXHTmwKw5e8PRSEFVUISxjCDtnqSPXNps=) 10: czt3GQhHtSmOo6RJuvFMFQAKSGo.roa (hash: XJWzfiETobcimR26X1Pa8klzjoq9ZGkjfUnqI+42fs0=) 11: eL6yX2gKmuR54LoAuIUZEONKX3g.roa (hash: Wq/KgDr2vwlpid8VQStYJgjmPQjXNNh76BSl9DIrTcE=) 12: hBf-hoIhETw06OBRpv7F1WdTrE8.roa (hash: LSEM+beBKj2xu4gyMsUhzku59BFOyI6BOdyKq1jM8vA=) 13: ps-3dIi4E3kjzYMhNLY6gSZjzEI.roa (hash: AimvrgTPnFzv1TtjV/eH/9wijMpIF0IeujrL4F6J9qw=) 14: vWlItCBxAXeKE8gJX96SzwOKVyc.roa (hash: Y2Q+VHBMvY4aKyxjSWnm9nXu79hw6C2astvb5J8gRi4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 09:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b5:c5:21:8e:d8:7e:1d:f9:cd:b4:2a:1c:b0:a2:91:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1 Validity Not Before: Jun 28 09:01:24 2025 GMT Not After : Jun 29 09:01:24 2025 GMT Subject: CN=ed734b924abff80bd1f380b54335961860f4153c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:54:27:d2:2d:dd:18:b0:0a:1a:85:e2:c7:db: a5:1f:9f:ac:c4:9f:cb:8f:5e:b3:76:0d:ba:38:b1: 76:03:67:e0:f2:31:67:80:f7:5c:9d:d5:82:ec:e4: a4:c2:da:c3:50:2e:d7:6b:70:05:6b:0c:4a:65:64: b8:3f:e2:fd:2a:22:73:9b:3c:67:c3:26:8f:08:24: 06:cc:d7:f2:0d:4e:34:aa:4c:55:06:4b:d8:a0:4b: 71:23:96:4f:44:e6:a7:88:3e:ec:d0:bf:7e:da:ff: 08:de:fb:e8:d6:cc:41:e8:a2:59:f0:f5:27:7f:7e: ca:63:5a:5a:84:ba:2a:42:c6:5e:a1:fd:44:e2:da: 19:97:d3:41:32:67:cc:67:87:4e:c0:31:e7:f5:4e: 6f:fd:6f:60:06:bf:3e:8e:21:e7:ce:38:3e:bc:47: a3:5c:48:42:c9:a7:df:d7:6a:55:de:5a:6e:84:98: ba:af:06:40:05:04:41:af:aa:41:43:50:63:7c:9e: db:7e:5c:f1:11:b8:2f:ae:f7:50:ad:74:48:3a:b4: 20:1c:7a:8f:22:7c:f9:68:38:aa:6b:2b:63:80:f8: 1b:23:77:62:36:2d:1a:2f:9d:6b:3f:97:6c:cd:f7: 36:e3:06:8b:ea:51:8d:01:ef:70:4f:a7:f2:95:a7: 07:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:73:4B:92:4A:BF:F8:0B:D1:F3:80:B5:43:35:96:18:60:F4:15:3C X509v3 Authority Key Identifier: keyid:DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:1f:46:7d:d6:55:a3:e2:7c:65:6d:bf:13:b8:d3:ad:2c:f8: 4c:3f:e3:62:90:3f:9d:04:c5:ad:d9:a6:15:c9:48:71:30:a1: e6:9a:3b:ba:75:1a:42:65:9a:05:ab:67:96:1a:1c:b1:a3:bd: 6a:3e:18:80:e5:fc:d4:50:34:10:20:35:99:57:d6:6d:f8:80: 89:53:dd:f7:4c:48:09:b7:4b:5e:3b:c9:37:95:c6:42:70:e4: 73:42:46:df:55:93:9f:68:13:42:a2:e9:6a:2a:21:1e:56:54: ca:71:e0:0e:c1:25:bb:31:c4:40:a4:c7:ee:c5:89:aa:e1:d5: 3e:2f:76:0f:d9:39:d7:1d:5d:7c:4c:cf:05:2d:ea:bd:3b:9e: 7d:b8:b8:59:26:34:fd:ce:8e:99:34:51:f5:9e:28:af:4e:a4: eb:8a:22:35:64:55:9c:31:3b:10:e1:f4:24:f4:5b:d2:f8:6c: 98:7f:a1:9a:97:63:ed:03:75:7e:87:8d:22:38:66:4d:2c:2c: d3:d0:5b:e9:67:3c:70:f5:d7:40:de:3f:53:74:a6:7e:be:6e: e1:f2:5e:fd:c7:dc:1b:0c:79:ac:e0:9e:20:5e:2c:4c:12:ef: ad:a6:40:9e:8e:36:36:b5:b9:49:f6:5e:dd:ae:6f:84:55:3d: d9:f9:e4:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe1xSGO2H4d+c20KhywopHPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiZTZhYjhlMGM0NmU4NDFiNDRkMmI5YzZiMDNiYjY1ZjU2 MjFkYjEwHhcNMjUwNjI4MDkwMTI0WhcNMjUwNjI5MDkwMTI0WjAzMTEwLwYDVQQD EyhlZDczNGI5MjRhYmZmODBiZDFmMzgwYjU0MzM1OTYxODYwZjQxNTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlQn0i3dGLAKGoXix9ulH5+sxJ/L j16zdg26OLF2A2fg8jFngPdcndWC7OSkwtrDUC7Xa3AFawxKZWS4P+L9KiJzmzxn wyaPCCQGzNfyDU40qkxVBkvYoEtxI5ZPROaniD7s0L9+2v8I3vvo1sxB6KJZ8PUn f37KY1pahLoqQsZeof1E4toZl9NBMmfMZ4dOwDHn9U5v/W9gBr8+jiHnzjg+vEej XEhCyaff12pV3lpuhJi6rwZABQRBr6pBQ1BjfJ7bflzxEbgvrvdQrXRIOrQgHHqP Inz5aDiqaytjgPgbI3diNi0aL51rP5dszfc24waL6lGNAe9wT6fylacHawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO1zS5JKv/gL0fOAtUM1lhhg9BU8MB8GA1UdIwQY MBaAFNvmq44MRuhBtE0rnGsDu2X1Yh2xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS85NjQzNmMtZjZmYS00MGJhLWEyN2Mt ZmIxMDMwNjUxMDY3LzEvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS85NjQzNmMtZjZmYS00MGJhLWEyN2MtZmIxMDMwNjUxMDY3 LzEvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIh9GfdZV o+J8ZW2/E7jTrSz4TD/jYpA/nQTFrdmmFclIcTCh5po7unUaQmWaBatnlhocsaO9 aj4YgOX81FA0ECA1mVfWbfiAiVPd90xICbdLXjvJN5XGQnDkc0JG31WTn2gTQqLp aiohHlZUynHgDsEluzHEQKTH7sWJquHVPi92D9k51x1dfEzPBS3qvTuefbi4WSY0 /c6OmTRR9Z4or06k64oiNWRVnDE7EOH0JPRb0vhsmH+hmpdj7QN1foeNIjhmTSws 09Bb6Wc8cPXXQN4/U3Smfr5u4fJe/cfcGwx5rOCeIF4sTBLvraZAno42NrW5SfZe 3a5vhFU92fnkIg== -----END CERTIFICATE-----Generated at Sat Jun 28 19:12:22 2025 by rpki-client